Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kENQC_f8SKMzcFNaTxHoHyH_15Y.roa
File:                     kENQC_f8SKMzcFNaTxHoHyH_15Y.roa (raw, json)
Hash identifier:          82Ir2wXaGQxCnOGgwcRZdhx9kViXHJOoQt2OAcpn/hw=
Subject key identifier:   90:43:50:0B:F7:FC:48:A3:33:70:53:5A:4F:11:E8:1F:21:FF:D7:96
Certificate issuer:       /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial:       018AE97343842CFE54ADB98FF04C04D60838
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kENQC_f8SKMzcFNaTxHoHyH_15Y.roa
Signing time:             Sun 01 Oct 2023 04:15:59 +0000
ROA not before:           Sun 01 Oct 2023 04:15:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:e9:73:43:84:2c:fe:54:ad:b9:8f:f0:4c:04:d6:08:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
        Validity
            Not Before: Oct  1 04:15:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9043500bf7fc48a33370535a4f11e81f21ffd796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:77:a6:d5:90:89:f4:d1:9e:4b:1b:2f:85:95:
                    a1:a7:d6:8f:89:5d:08:bc:c5:f7:14:32:bd:2a:8d:
                    5a:a1:0a:68:9f:1b:dd:37:f4:a7:38:c1:fa:e5:83:
                    70:d1:e7:d2:74:e1:33:3b:de:28:0c:94:07:e9:7f:
                    28:98:b7:14:07:77:6c:0a:2c:37:5c:24:44:79:19:
                    02:e7:46:b8:3d:83:35:c5:f0:9f:d5:13:5c:f6:83:
                    e7:de:83:bf:ae:32:fd:ff:20:0b:93:89:2c:34:54:
                    dd:77:17:f8:7a:3b:d3:0a:11:02:2d:83:4f:17:99:
                    17:37:3e:a1:9c:7d:52:9a:a6:16:13:99:a7:ee:85:
                    a1:b9:c2:04:07:77:02:cf:d0:e6:4b:db:cb:c1:45:
                    74:ea:35:24:c2:16:e5:9c:ac:27:27:60:f9:3d:a8:
                    21:72:67:1b:0d:f1:42:3f:89:c5:7d:ec:75:5d:4d:
                    25:14:d1:0f:06:2e:f4:67:2e:8d:85:e5:f7:75:2d:
                    20:b9:16:e9:23:b5:ff:9f:7c:72:21:29:86:11:1a:
                    69:0a:87:89:6f:a3:c1:ba:fc:45:f7:1d:53:fb:af:
                    49:fc:fa:c3:6f:b6:23:c5:38:ea:0c:e6:37:0f:94:
                    6b:e8:cd:af:35:3e:fd:4c:bc:76:b6:81:84:f0:b9:
                    e3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:43:50:0B:F7:FC:48:A3:33:70:53:5A:4F:11:E8:1F:21:FF:D7:96
            X509v3 Authority Key Identifier:
                keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kENQC_f8SKMzcFNaTxHoHyH_15Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:f4:7b:2f:f4:77:67:14:34:4b:04:4f:40:b2:80:4f:d5:26:
         e3:81:85:24:4f:30:ba:e9:ed:d5:0c:6a:c1:4b:f7:41:a9:53:
         7e:6a:1a:8b:64:8e:16:c0:c6:02:7c:a4:75:c3:c6:cd:85:b7:
         8b:d6:bd:d4:a0:ef:12:67:14:30:09:03:31:73:af:c8:f4:9a:
         32:f9:53:0f:66:e3:63:b3:df:8d:78:d8:99:f0:e0:f8:b7:69:
         56:eb:de:50:8d:67:19:2a:fe:d8:cf:a9:89:a9:e9:1e:0f:d4:
         b1:bf:8e:78:99:a5:ea:15:f8:84:34:71:9b:d9:c8:16:d1:18:
         03:fc:3e:e4:f1:69:5e:3e:be:2f:f0:88:32:9c:75:04:aa:02:
         a4:38:4e:2b:3b:c4:dc:a1:e2:f1:ce:1b:a9:a5:6a:f4:32:0e:
         15:ef:31:f3:75:40:37:29:22:1b:c3:1a:e6:2e:66:a6:89:ea:
         98:5b:02:f2:85:e2:5a:7c:f6:b8:1a:4c:cd:5b:f0:7d:bf:ca:
         36:b9:42:30:54:5e:ae:89:7f:ef:5a:17:a0:e0:a6:81:2d:2b:
         36:fd:ce:a8:c7:c9:94:cd:74:f6:e1:d7:2d:0a:94:15:18:80:
         83:ad:63:4e:32:a7:b8:d3:df:88:13:f4:85:81:b5:0a:0a:97:
         a5:0d:b4:40
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrpc0OELP5UrbmP8EwE1gg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDAxMDQxNTU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDQzNTAwYmY3ZmM0OGEzMzM3MDUzNWE0ZjExZTgxZjIxZmZkNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHem1ZCJ9NGeSxsvhZWhp9aPiV0I
vMX3FDK9Ko1aoQponxvdN/SnOMH65YNw0efSdOEzO94oDJQH6X8omLcUB3dsCiw3
XCREeRkC50a4PYM1xfCf1RNc9oPn3oO/rjL9/yALk4ksNFTddxf4ejvTChECLYNP
F5kXNz6hnH1SmqYWE5mn7oWhucIEB3cCz9DmS9vLwUV06jUkwhblnKwnJ2D5Pagh
cmcbDfFCP4nFfex1XU0lFNEPBi70Zy6NheX3dS0guRbpI7X/n3xyISmGERppCoeJ
b6PBuvxF9x1T+69J/PrDb7YjxTjqDOY3D5Rr6M2vNT79TLx2toGE8Lnj6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJBDUAv3/EijM3BTWk8R6B8h/9eWMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEva0VOUUNfZjhTS016Y0ZOYVR4SG9IeUhfMTVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAL/0ey/0d2cUNEsET0Cy
gE/VJuOBhSRPMLrp7dUMasFL90GpU35qGotkjhbAxgJ8pHXDxs2Ft4vWvdSg7xJn
FDAJAzFzr8j0mjL5Uw9m42Oz34142Jnw4Pi3aVbr3lCNZxkq/tjPqYmp6R4P1LG/
jniZpeoV+IQ0cZvZyBbRGAP8PuTxaV4+vi/wiDKcdQSqAqQ4Tis7xNyh4vHOG6ml
avQyDhXvMfN1QDcpIhvDGuYuZqaJ6phbAvKF4lp89rgaTM1b8H2/yja5QjBUXq6J
f+9aF6DgpoEtKzb9zqjHyZTNdPbh1y0KlBUYgIOtY04yp7jT34gT9IWBtQoKl6UN
tEA=
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:27:19 2025 by rpki-client